Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa
File:                     97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa (raw, json)
Hash identifier:          r6xmANsT47yU22SnXOTo7JDG3WP84YhSLgP07TkJ18U=
Subject key identifier:   DC:83:00:A1:40:3B:FB:48:35:EB:B1:0D:EC:35:98:9A:8D:A0:9F:A1
Certificate issuer:       /CN=452d8948-a48b-4a64-bb88-5c289408944c
Certificate serial:       010D0C9F4328584EFCACC437FDC92F4C862E2880
Authority key identifier: 2A:C7:B0:C3:0E:1D:6A:CF:89:9D:3D:35:A7:1B:2B:61:B6:4C:37:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa
Signing time:             Fri 28 Aug 2026 13:00:12 +0000
ROA not before:           Fri 28 Aug 2026 13:00:12 +0000
ROA not after:            Thu 26 Nov 2026 14:00:12 +0000
asID:                     33201
IP address blocks:        23.142.112.0/24 maxlen: 24
                          2602:800:e000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:fc:ac:c4:37:fd:c9:2f:4c:86:2e:28:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=452d8948-a48b-4a64-bb88-5c289408944c
        Validity
            Not Before: Aug 28 13:00:12 2026 GMT
            Not After : Nov 26 14:00:12 2026 GMT
        Subject: CN=089ed21d-b46a-4e95-af2b-83e0f77c7f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ac:89:8b:33:74:4a:79:c1:26:bc:19:bd:6c:
                    7f:bb:ec:fd:42:93:e7:d4:7f:fe:ea:dc:cd:93:cc:
                    25:09:61:70:79:a7:7a:e2:6a:6e:2c:fd:9e:27:e3:
                    62:cc:a0:92:29:29:f2:fd:61:4b:19:23:38:1e:e4:
                    44:ca:12:27:66:49:36:09:3f:81:63:53:f7:f8:9d:
                    f3:d6:80:01:8a:eb:c3:2e:a0:4a:89:ae:9e:c8:e3:
                    b7:2f:42:52:dc:cd:41:2e:4f:90:1a:62:18:90:08:
                    b4:f8:80:86:1b:25:32:7c:b9:c4:57:49:b3:ee:7c:
                    0c:b9:81:df:49:10:79:e9:81:4e:68:fb:a2:54:51:
                    69:b7:10:11:5f:86:73:34:bc:f0:1a:a5:da:9a:44:
                    e5:39:da:e5:c9:c9:f9:d1:3b:31:e7:5e:e2:59:1d:
                    65:cc:69:25:ec:9a:e1:3f:86:b4:15:c5:17:27:e8:
                    cc:1e:1d:87:62:6e:7f:64:68:bc:94:6c:32:2c:b7:
                    73:bc:2d:f8:b1:5f:63:3b:5f:06:8a:ea:f0:e2:58:
                    d9:24:ab:b7:14:86:81:38:ea:3f:5b:aa:7c:17:50:
                    a4:4a:01:64:df:d7:e9:f6:79:54:41:9b:69:1c:a3:
                    4f:c6:a5:5b:9a:1f:5e:6b:85:e1:78:90:8e:e7:7e:
                    c5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:83:00:A1:40:3B:FB:48:35:EB:B1:0D:EC:35:98:9A:8D:A0:9F:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/97dbb27c-905a-35e1-9c6a-f1323ce4e91d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c/452d8948-a48b-4a64-bb88-5c289408944c.crl

            X509v3 Authority Key Identifier:
                keyid:2A:C7:B0:C3:0E:1D:6A:CF:89:9D:3D:35:A7:1B:2B:61:B6:4C:37:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/452d8948-a48b-4a64-bb88-5c289408944c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.112.0/24
                IPv6:
                  2602:800:e000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:69:51:8c:5c:cc:a0:bd:6b:73:fd:3f:75:2b:a2:c4:d3:dd:
         9a:8b:14:24:54:79:91:82:5f:e1:48:36:73:93:63:df:8a:4f:
         81:7b:56:61:6b:a8:67:14:13:cc:38:33:2f:7d:90:ce:20:3c:
         42:4c:f7:2f:ff:30:0c:67:d5:d1:82:b0:2f:58:12:71:48:9b:
         b8:92:93:de:ed:57:ee:37:b7:d5:8a:25:65:3c:77:91:36:f8:
         c8:02:42:9b:95:0c:1d:01:72:d0:73:ff:82:d2:47:ad:15:69:
         1e:ca:4d:9c:cf:96:a1:b8:ca:19:dd:bb:c5:c3:74:f4:6e:3a:
         74:c0:58:f8:49:bd:dd:8e:18:e3:35:06:a1:4d:73:dc:fc:fa:
         b6:9b:01:be:6c:84:b9:ce:59:86:fb:56:4e:62:88:6b:7d:ce:
         55:f0:6c:84:6b:80:5b:9c:8a:06:ba:ed:1e:c7:ad:80:d9:c8:
         0f:9e:2e:4a:f8:cd:bb:10:d2:88:56:a6:9a:00:5a:c6:53:cd:
         2d:1f:84:f3:9c:31:89:06:b7:7c:99:27:dc:90:55:04:f7:c8:
         53:eb:12:f9:28:74:c7:53:e8:21:45:04:99:91:9b:3b:30:1f:
         ef:3b:af:91:7c:61:33:97:1d:fd:84:4b:7b:92:23:4b:ad:98:
         84:5c:6a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:16:30 2026 by rpki-client